Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/8c7a1f3c-4aad-39ce-bb10-6286557605d0.roa
File:                     8c7a1f3c-4aad-39ce-bb10-6286557605d0.roa (raw, json)
Hash identifier:          QFQ91PIXFkkeOMD1Xu9gWsqaNW37O+s1srcnAoGEyz4=
Subject key identifier:   95:75:C4:2C:85:D0:83:05:DA:5B:B5:71:9C:4A:FC:F4:C9:E1:3C:5B
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F4328584D343A11150FB50061B0397500
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/8c7a1f3c-4aad-39ce-bb10-6286557605d0.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     11117
IP address blocks:        128.254.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:11:15:0f:b5:00:61:b0:39:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=fa308fef-eaef-498d-8931-a165d7d81592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:a7:51:90:10:0e:ce:d4:61:30:2b:70:92:
                    65:ed:11:c8:98:93:9b:f1:b9:a1:40:c4:3f:bf:23:
                    7a:59:a7:7d:d2:48:e4:ea:57:68:eb:fd:dc:5e:13:
                    ca:63:38:33:a7:66:1a:39:87:cc:f7:07:91:82:3e:
                    dd:3f:32:3c:b8:f2:b4:73:f5:4c:b6:00:4d:35:e1:
                    c5:2e:a6:a1:63:3e:76:72:02:25:3e:ae:4a:10:78:
                    55:1d:db:33:e7:08:3d:e7:4d:34:32:4e:82:4e:6d:
                    03:73:45:b6:19:46:a9:35:eb:6c:b5:1f:8c:a0:1d:
                    fb:8e:c0:a3:a9:cf:de:90:68:43:7f:ae:d2:3b:eb:
                    b5:98:22:5c:16:56:83:cf:21:44:69:40:27:a6:13:
                    31:30:a0:87:0a:71:8e:ea:3f:70:67:26:77:19:9a:
                    e2:b6:79:e9:1f:0f:c5:fa:7f:fe:f8:0f:b0:b3:f3:
                    9a:6a:a0:7d:44:60:9b:f1:6a:a0:8b:87:3e:22:b3:
                    88:6a:f0:07:39:ef:fa:f4:75:e8:38:7a:23:42:cc:
                    69:55:1f:bb:18:00:3e:3b:47:b6:7b:2b:2f:01:70:
                    c3:06:21:fb:c7:8a:bf:96:9f:3b:0d:27:47:90:b9:
                    f6:a2:83:d5:be:72:17:a9:3a:d2:71:b5:7e:89:93:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:75:C4:2C:85:D0:83:05:DA:5B:B5:71:9C:4A:FC:F4:C9:E1:3C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/8c7a1f3c-4aad-39ce-bb10-6286557605d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:ef:0c:8c:a8:6f:84:23:d9:ed:8d:59:01:c6:5f:97:9d:
         b9:7f:15:31:f9:90:67:64:dd:ad:8d:5a:3e:8f:0d:92:99:02:
         eb:38:b0:b4:cc:93:ea:94:0f:98:70:73:7f:5d:01:ab:2b:c9:
         89:ae:84:89:7d:00:32:1a:93:1f:d1:ec:7a:7a:71:34:3f:2b:
         34:76:bb:09:23:5c:63:cc:4c:56:ed:7a:0f:2c:56:b5:37:45:
         3b:b5:d3:04:de:66:75:8d:c3:0d:8e:a1:44:f0:64:98:86:7e:
         ee:70:b9:d6:99:60:60:37:43:a4:cd:5e:58:2d:e4:e6:a2:d2:
         9a:08:41:85:16:54:0f:0f:a7:ea:61:af:e5:62:a5:9b:fd:09:
         1c:84:9a:a3:db:a9:58:51:ec:70:e3:1c:60:58:de:9f:57:6a:
         08:a8:90:18:23:9c:85:73:d3:08:c6:c1:22:e5:9d:82:f8:e7:
         81:50:8f:a3:22:29:31:ca:9f:7a:77:e2:73:58:d0:86:2f:c3:
         1e:ab:ab:78:f7:a0:9d:52:44:5a:c7:6b:7b:ce:aa:b3:e7:88:
         55:07:f6:8e:de:ba:aa:76:28:b5:08:be:35:1e:06:98:c4:1b:
         2d:9a:91:cc:3a:02:f5:70:d0:ba:c7:f5:5b:25:f3:07:1e:0b:
         2a:11:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:41 2026 by rpki-client